$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: OKIsdhQhtHeDgmXFFXrGOavF4JdOUTUVw+ktw5Tng2E= Subject key identifier: 06:76:37:E4:DC:D8:AD:5F:93:E3:D0:17:46:E3:A0:D3:14:88:1C:88 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 12BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 128D Signing time: Thu 08 Oct 2026 17:10:10 +0000 Manifest this update: Thu 08 Oct 2026 17:10:09 +0000 Manifest next update: Thu 15 Oct 2026 17:10:09 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: iQ8r1l2Vxgbn/a+wlofIelVzRD3y+dbcxEnNr/n5El0=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4799 (0x12bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Oct 8 17:10:09 2026 GMT Not After : Oct 15 17:10:09 2026 GMT Subject: CN=6ac7ce72-2a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:dd:69:87:48:5f:c8:2b:b4:84:e1:17:b4: 24:75:38:5b:f1:98:0e:f0:28:2a:21:66:f5:cc:fd: 98:aa:f2:d9:da:d0:55:17:65:57:55:5c:d1:97:bb: ae:4a:6d:bc:43:ca:83:22:93:3a:80:19:30:22:4e: 9b:10:f1:6e:e7:83:fd:f4:d3:c5:b0:68:2e:22:dc: f8:8a:fb:1d:3e:00:bd:c2:79:cf:b1:6b:fd:46:28: f0:1f:e4:5a:4e:47:93:96:ad:d7:f1:b5:99:09:c3: 1d:dd:0e:4a:d4:bf:93:a4:75:b5:a7:ea:5c:50:ad: d0:c7:af:c0:0d:a0:72:7c:9e:25:5e:d9:ca:7f:a5: b7:6e:1a:ef:dc:15:98:3d:d7:4f:35:0b:b4:2e:23: 40:85:df:f7:5a:55:9b:59:cf:98:38:30:6b:7b:e7: 67:8a:d3:62:97:b4:82:06:ff:96:d1:fb:1b:fb:3e: 09:4d:6a:64:80:21:56:d0:62:71:fd:df:ac:cf:47: a6:9b:54:67:b9:92:a3:ae:49:6a:72:a5:5e:5d:6c: b4:49:47:bb:06:2c:3d:b3:37:05:fd:53:47:fa:0f: dc:f8:f8:11:41:b6:5d:02:99:8e:d9:c8:7f:86:da: 24:03:8e:b9:9f:d3:db:66:1f:e3:6c:12:4d:0f:48: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:76:37:E4:DC:D8:AD:5F:93:E3:D0:17:46:E3:A0:D3:14:88:1C:88 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fc:dd:2b:53:71:f9:e3:70:2c:be:97:f1:0c:cc:cb:b9:f1: 99:a5:78:51:c3:96:be:93:fe:36:0b:3b:e8:f5:74:98:eb:ee: 78:1a:39:b8:c3:9c:3c:2a:26:e8:ac:da:33:75:9e:e2:86:fe: d4:b2:39:a3:bd:2d:f5:f5:d0:4d:67:3e:46:36:7b:eb:1e:8e: c6:d2:8f:b2:19:a0:48:4c:61:fd:4e:7d:06:b9:8b:91:11:c9: bd:d3:e0:3b:d4:fd:fe:77:e1:ef:e6:1a:fb:ec:bd:97:7c:f6: a6:0e:80:43:4b:8a:a1:92:e3:ec:df:8c:cb:72:34:36:cc:de: 26:bc:61:b7:6d:39:b3:1b:06:4b:23:b7:f4:5b:df:96:17:6a: 8b:d2:3b:c0:75:3a:ee:bf:4b:ec:82:17:27:8f:72:9c:27:1c: a4:c1:77:90:68:17:6e:15:1f:80:72:80:9d:93:17:1a:74:77: fc:69:36:9c:74:33:26:4b:2f:65:13:72:13:26:a0:3a:5c:6e: 56:43:ab:e8:5e:7e:8a:70:aa:55:6a:fb:ea:76:ce:13:d8:e8: 67:8b:2a:df:33:ee:6d:ca:d0:45:80:93:b7:28:32:22:1d:d5: 7d:23:27:4e:b8:07:78:6e:7e:82:77:60:d1:af:ed:bc:03:b9: 0c:1a:d7:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYxMDA4MTcxMDA5WhcNMjYxMDE1MTcxMDA5WjAYMRYwFAYD VQQDEw02YWM3Y2U3Mi0yYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCfdaYdIX8grtIThF7QkdThb8ZgO8CgqIWb1zP2YqvLZ2tBVF2VXVVzRl7uu Sm28Q8qDIpM6gBkwIk6bEPFu54P99NPFsGguItz4ivsdPgC9wnnPsWv9RijwH+Ra TkeTlq3X8bWZCcMd3Q5K1L+TpHW1p+pcUK3Qx6/ADaByfJ4lXtnKf6W3bhrv3BWY PddPNQu0LiNAhd/3WlWbWc+YODBre+dnitNil7SCBv+W0fsb+z4JTWpkgCFW0GJx /d+sz0emm1RnuZKjrklqcqVeXWy0SUe7Biw9szcF/VNH+g/c+PgRQbZdApmO2ch/ htokA465n9PbZh/jbBJND0g13QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ2N+Tc 2K1fk+PQF0bjoNMUiByIMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARPzdK1Nx+eNwLL6X8QzMy7nxmaV4UcOWvpP+Ngs76PV0mOvueBo5uMOcPCom 6KzaM3We4ob+1LI5o70t9fXQTWc+RjZ76x6OxtKPshmgSExh/U59BrmLkRHJvdPg O9T9/nfh7+Ya++y9l3z2pg6AQ0uKoZLj7N+My3I0NszeJrxht205sxsGSyO39Fvf lhdqi9I7wHU67r9L7IIXJ49ynCccpMF3kGgXbhUfgHKAnZMXGnR3/Gk2nHQzJksv ZRNyEyagOlxuVkOr6F5+inCqVWr76nbOE9joZ4sq3zPubcrQRYCTtygyIh3VfSMn TrgHeG5+gndg0a/tvAO5DBrXbw== -----END CERTIFICATE-----Generated at Sat Oct 10 12:00:43 2026 by rpki-client